Skip to main content

​
Authentication

SMO1 uses Better Auth for authentication with JWT tokens for API access.

​
Auth Flow

  1. User signs in via meow-web using Better Auth (email/password, OAuth)
  2. Better Auth issues a session
  3. For API access, a JWT token is generated
  4. API requests include the JWT in the Authorization header

​
API Authentication

​
Bearer Token

Authorization: Bearer <jwt-token>

​
API Keys

For programmatic access, API keys can be generated in the dashboard: 
X-API-Key: <api-key>

​
Internal API

Internal service-to-service calls use the internal API key: 
X-Internal-Key: <internal-api-key>